Comments:EventID.Net
This event can occur when the Windows logon (Winlogon.exe) process does not ignore the Windows logon screen saver time-out. See ME916719 for a hotfix applicable to Microsoft Windows Server 2003.

As per Microsoft: "This event is written during an expected restart or shutdown after the user initiates the restart or shutdown by clicking Start and then clicking Shut Down, or by pressing CTRL+ALT+DELETE and then clicking Shut Down". See MSW2KDB for additional information about this event.
x
18